|
Pages: [1] 2
|
 |
|
Author
|
Topic: NetBIOS - COMPLETED Many thanks to all (Read 312 times)
|
LizzieW
RootsChat Marquessate
       
Posts: 3344

|
What is this. ZoneAlarm has blocked about 10 of these today. An instance is:
[NetBIOS session] from 192.168.0.2 (TCP Port 1900) [TCP Flags: S]
Do I need them, as I can't find a way of letting them through, or are they connected to virus/spies/worms?
Lizzie
|
|
|
|
« Last Edit: Tuesday 03 November 09 12:26 UTC (UK) by LizzieW »
|
Logged
|
BENSON- Dalton in Furness (Ulverston) and Hull BETTISON - Derbys BOULTON - Dalton-in-Furness and surrounding areas BRAND - Lincs COCKETT - Lincs, Yorks, Lancs DA COSTA (or variants) - Spain or Portugal, London (Middx), ?Hull GILCHRIST - Scotland, Lincs HINGLEY - Derbys/Yorks MANN - Sussex, Kent, Herts MUMBY - Lincolnshire and Hull PEMBERTON - Ches, Lancashire STANTON - Lincs ROBINSON - Lincs WHITTAKER/WHITAKER - Ches/Lancs WRIGHT- Bethnal Green
|
|
|
Nick29
RootsChat Aristocrat
     
Posts: 2924

|
 |
Re: NetBIOS
« Reply #1 on: Sunday 01 November 09 22:16 UTC (UK) » |
|
Netbios can be linked to virus activity. Do you have an up to date virus checker ?
|
|
|
|
|
Logged
|
Best Wishes, Nick. Research interests: Field - Luton & Islington Hole - Somerset, Suffolk & Surrey Farnish, Parker, Cattermole, Last, Wasp, Church - Suffolk Lewin/Lowin/Lowen - Hertfordhire Martin - Eltham & Greenwich, Kent (London) Stead - Greenwich, London (Kent) & Maidstone Wood - Hertfordshire Census information Crown Copyright, from www.nationalarchives.gov.uk
|
|
|
les_looking
RootsChat Senior
   
Posts: 309

Census information Crown Copyright, from www.nationalarchives.gov.uk
|
 |
Re: NetBIOS
« Reply #2 on: Sunday 01 November 09 22:18 UTC (UK) » |
|
more than likely its your own ip are you using a router/other comps on your network? it could even be your own isp trying to communicate with your computer, if your on a network and other comps' use the same printer/file sharing, zone will also flag this, so not a lot to worry about
just to add i use zone and you can go into config' and turn off reporting for minor reports, also if you are not on a network, check if your file sharing etc is switched off otherwise it will keep searching for it
|
|
|
|
|
Logged
|
|
|
|
LizzieW
RootsChat Marquessate
       
Posts: 3344

|
 |
Re: NetBIOS
« Reply #3 on: Sunday 01 November 09 23:24 UTC (UK) » |
|
I use a wireless router connected to my husband's PC, but he has not been trying to communicate with me - well he did forward a copy of an e-mail he'd received earlier today and I got that without any problems. I could turn off reporting for minor reports, but I haven't changed the way I have Zone set up, so I don't want to do that.
Yes, Nick I have an up to date virus and spyware checker - ZoneAlarm Security Suite, also an adware scanner, which usually only finds cookies.
I'll try to sort things out tomorrow, it's too late now to start.
|
|
|
|
|
Logged
|
BENSON- Dalton in Furness (Ulverston) and Hull BETTISON - Derbys BOULTON - Dalton-in-Furness and surrounding areas BRAND - Lincs COCKETT - Lincs, Yorks, Lancs DA COSTA (or variants) - Spain or Portugal, London (Middx), ?Hull GILCHRIST - Scotland, Lincs HINGLEY - Derbys/Yorks MANN - Sussex, Kent, Herts MUMBY - Lincolnshire and Hull PEMBERTON - Ches, Lancashire STANTON - Lincs ROBINSON - Lincs WHITTAKER/WHITAKER - Ches/Lancs WRIGHT- Bethnal Green
|
|
|
les_looking
RootsChat Senior
   
Posts: 309

Census information Crown Copyright, from www.nationalarchives.gov.uk
|
 |
Re: NetBIOS
« Reply #4 on: Sunday 01 November 09 23:43 UTC (UK) » |
|
don't mean ANYONE was trying to communicate with you Lizzie, it does it automatically, check what your ip is first, i will also take a punt that your on talk talk, virgin or maybe aol, as zone will pick up more alerts from some isp's, no problem if you don't want to alter the settings, just to add your not actually turning the blocking off just the minor reporting in the bottom right so your not having to accept deny etc
other issues could be if your running zone on your machine and you mentioned your husbands pc, if he is not running zone then when he loads new programmes etc it COULD pick up on those, as i said i wouldn't worry to much if it was anything major zone would tell you
|
|
|
|
|
Logged
|
|
|
|
Nick29
RootsChat Aristocrat
     
Posts: 2924

|
 |
Re: NetBIOS
« Reply #5 on: Monday 02 November 09 09:20 UTC (UK) » |
|
Best thing to do is to disable NETBIOS - it's quite insecure, and it's not needed.
|
|
|
|
|
Logged
|
Best Wishes, Nick. Research interests: Field - Luton & Islington Hole - Somerset, Suffolk & Surrey Farnish, Parker, Cattermole, Last, Wasp, Church - Suffolk Lewin/Lowin/Lowen - Hertfordhire Martin - Eltham & Greenwich, Kent (London) Stead - Greenwich, London (Kent) & Maidstone Wood - Hertfordshire Census information Crown Copyright, from www.nationalarchives.gov.uk
|
|
|
LizzieW
RootsChat Marquessate
       
Posts: 3344

|
 |
Re: NetBIOS
« Reply #6 on: Monday 02 November 09 10:09 UTC (UK) » |
|
Thanks. I am able to access photos on my husband's PC, so the local connection must be OK, even though part of the Red warning states it is Local Connection.
I think you might be correct about the problem being with my husband's PC. He used to have ZoneAlarm, but decided not renew his sub, but wait until mine was due so that I could pay for a sub that covered both machines (when I say I could pay for, we have a joint account, so not strictly I!). Meanwhile he is using AVG. In the normal run of things this wouldl probably be fine, but the grandchildren were here last week for half term and one of them loaded lots of games onto husband's PC (they think incorrectly that as his PC screen is larger than my laptop his PC must have more Ram), although a larger screen makes it easier to play games.
I'll get him to take off all the games, meanwhile I'll just click OK on the red warnings.
Lizzie
ps. When I did a search for NetBIOS, nothing could be found on my laptop.
|
|
|
|
|
Logged
|
BENSON- Dalton in Furness (Ulverston) and Hull BETTISON - Derbys BOULTON - Dalton-in-Furness and surrounding areas BRAND - Lincs COCKETT - Lincs, Yorks, Lancs DA COSTA (or variants) - Spain or Portugal, London (Middx), ?Hull GILCHRIST - Scotland, Lincs HINGLEY - Derbys/Yorks MANN - Sussex, Kent, Herts MUMBY - Lincolnshire and Hull PEMBERTON - Ches, Lancashire STANTON - Lincs ROBINSON - Lincs WHITTAKER/WHITAKER - Ches/Lancs WRIGHT- Bethnal Green
|
|
|
GrahamH
RootsChat Senior
   
Posts: 255

JiGraH Resources
|
 |
Re: NetBIOS
« Reply #7 on: Monday 02 November 09 10:19 UTC (UK) » |
|
The IP address 192.168.0.2 indicates that the request came from a computer on your own LAN, not from the Internet - which is as it should be because NetBIOS is a LAN protocol. There are a couple of articles Here and Here if you are interested.
As the articles show, it is a largely outmoded protocol nowadays and normally isn't required. I haven't come across it for several years but it used to be used widely when I worked in IT.
Given that your AV etc software is up to date and hasn't allowed any malware attack to get through there are a couple of other things to check: 1) Has anyone installed an old application which installs NetBIOS by default? 2) Has anyone changed (even inadvertently) any network settings and added the NetBIOS protocol?
If it is the former then check to see if the application will work without NetBIOS; if not you need to keep it. Otherwise NetBIOS can be deleted.
Graham
|
|
|
|
|
Logged
|
|
|
|
Nick29
RootsChat Aristocrat
     
Posts: 2924

|
 |
Re: NetBIOS
« Reply #8 on: Monday 02 November 09 10:21 UTC (UK) » |
|
To disable NetBIOS, do the following.....
Click on Start >> Settings >> Network Connections
then choose Local Area Network
Right-click on it and chooose Properties
In the list of installed components, you'll see one that lists NetBIOS - highlight it, and click the Delete button.
Then click on OK (there may be a short pause before the box disappears - this is normal).
You will then have un-installed the NetBIOS protocol.
|
|
|
|
|
Logged
|
Best Wishes, Nick. Research interests: Field - Luton & Islington Hole - Somerset, Suffolk & Surrey Farnish, Parker, Cattermole, Last, Wasp, Church - Suffolk Lewin/Lowin/Lowen - Hertfordhire Martin - Eltham & Greenwich, Kent (London) Stead - Greenwich, London (Kent) & Maidstone Wood - Hertfordshire Census information Crown Copyright, from www.nationalarchives.gov.uk
|
|
|
GrahamH
RootsChat Senior
   
Posts: 255

JiGraH Resources
|
 |
Re: NetBIOS
« Reply #9 on: Monday 02 November 09 10:25 UTC (UK) » |
|
Just seen your latest post Lizzie - posted whilst I was composing my reply. It could well be that one of the game applications has installed NetBIOS.
If you are removing them anyway then it shouldn't do any harm to uninstall NetBIOS. Do so via Network Connections/Local Area Connection/Properties (installed protocols, clients and services will be listed on the General tab).
Graham
|
|
|
|
|
Logged
|
|
|
|
LizzieW
RootsChat Marquessate
       
Posts: 3344

|
 |
Re: NetBIOS
« Reply #10 on: Monday 02 November 09 14:09 UTC (UK) » |
|
Nick and Graham
Thank you for your suggestion as to how to remove NetBIOS. Unfortunately, when I click on Start, there is no sign of Settings. I tried doing a search for Settings, Network Connections, Local Area Network, but nothing was found.
What am I doing wrong? I tried it on my husband's laptop and somehow got to Control Panel. When I go to Control Panel on my laptop (I have Vista), there is nothing called Settings.
I think I'm having a senior moment.
|
|
|
|
|
Logged
|
BENSON- Dalton in Furness (Ulverston) and Hull BETTISON - Derbys BOULTON - Dalton-in-Furness and surrounding areas BRAND - Lincs COCKETT - Lincs, Yorks, Lancs DA COSTA (or variants) - Spain or Portugal, London (Middx), ?Hull GILCHRIST - Scotland, Lincs HINGLEY - Derbys/Yorks MANN - Sussex, Kent, Herts MUMBY - Lincolnshire and Hull PEMBERTON - Ches, Lancashire STANTON - Lincs ROBINSON - Lincs WHITTAKER/WHITAKER - Ches/Lancs WRIGHT- Bethnal Green
|
|
|
Nick29
RootsChat Aristocrat
     
Posts: 2924

|
 |
Re: NetBIOS
« Reply #11 on: Monday 02 November 09 15:17 UTC (UK) » |
|
Arghh ! Vista !
This explains how to do it.....
http://www.howtogeek.com/howto/windows-vista/quickly-open-network-connections-list-in-windows-vista/
|
|
|
|
|
Logged
|
Best Wishes, Nick. Research interests: Field - Luton & Islington Hole - Somerset, Suffolk & Surrey Farnish, Parker, Cattermole, Last, Wasp, Church - Suffolk Lewin/Lowin/Lowen - Hertfordhire Martin - Eltham & Greenwich, Kent (London) Stead - Greenwich, London (Kent) & Maidstone Wood - Hertfordshire Census information Crown Copyright, from www.nationalarchives.gov.uk
|
|
|
|
|
GrahamH
RootsChat Senior
   
Posts: 255

JiGraH Resources
|
 |
Re: NetBIOS
« Reply #13 on: Monday 02 November 09 17:08 UTC (UK) » |
|
Looking back at previous posts, Lizzie, I think that maybe none of them was specific enough to point out that the problem probably stems from your husband's PC (where your grandchild installed the games).
Neither are they specific enough to point out that paths may differ depending on the desktop settings you have. I have my Vista laptop set up as Windows Classic and the path is the same as on XP - as Nick described in his posting of 10:21 this morning.
If you have a Network icon on the Vista desktop you can right click that to open up the Network and Sharing Center then click View Status where Local Area Connection is listed and click the Properties button to list the Protocols etc.
Graham
|
|
|
|
|
Logged
|
|
|
|
LizzieW
RootsChat Marquessate
       
Posts: 3344

|
 |
Re: NetBIOS
« Reply #14 on: Monday 02 November 09 17:20 UTC (UK) » |
|
Oh well, I followed instructions, used C:\windows\system32\ncpa.cpl in Search and got to Control Panel > Network Connections. On there are 3 double computer screens,
1. Marvell Yukon 88E8055 PCI-E Gigabit Ethernet Controller 2. Bluetooth Device (Personal Area Network) 3. Intel(R) WiFi Link 5100 AGN
The first two have large red crosses by them, so presumably they are disabled. Not sure if I need them to be enabled or not. The third is my wireless connection.
None of them have NetBIOS when I click properties, so I think what is happening is that the problem lies with my husband's PC and it is when his PC and my laptop are "talking" to each other, that ZoneAlarm security suite stops the NetBIOS from his PC. He needs to get rid of the games the boys put on it and get a proper Firewall.
I want to upgrade the ZoneAlarm for use on 3 computers (I know we only have 2 but that's not an option). Only problem is that husband's PC is 7 years old, has XP but only about half RAM, whereas for ZoneAlarm's upgrade, minimum XP is 1 RAM. I'm hoping that as I have Vista with 3 RAM and will be the licence holder that should suffice.
Thank you all for your help. I'll leave this open for another day in case anyone has any other bright ideas I can try.
Lizzie
|
|
|
|
|
Logged
|
BENSON- Dalton in Furness (Ulverston) and Hull BETTISON - Derbys BOULTON - Dalton-in-Furness and surrounding areas BRAND - Lincs COCKETT - Lincs, Yorks, Lancs DA COSTA (or variants) - Spain or Portugal, London (Middx), ?Hull GILCHRIST - Scotland, Lincs HINGLEY - Derbys/Yorks MANN - Sussex, Kent, Herts MUMBY - Lincolnshire and Hull PEMBERTON - Ches, Lancashire STANTON - Lincs ROBINSON - Lincs WHITTAKER/WHITAKER - Ches/Lancs WRIGHT- Bethnal Green
|
|
|
|
Pages: [1] 2
|
|
|
|
|